> limit or disable certain functionality in the vehicle: ... over-the-air updates, which provide new ... safety enhancements ...
I wonder what happens if you disable the e-SIM (in the US) and then a safety recall appears via software update - do dealers have any way to update control modules besides OTA?
This is a huge unresolved issue with EVs IMO; ICE cars are required to provide emissions-relevant updates over software which can operate using a J2534 passthrough device, which effectively means powertrain modules have to allow (potentially signed) updates over CAN using software that can be obtained by an end user (a lot of people don't know this; for almost any ICE car in the US, you can buy a 3-day or 1-week subscription to the dealership level diagnostic software for a somewhat reasonable fee and use it with a J2534 device).
But for EVs, there's no such rule and as far as I can tell it's entirely a gray area in the US now; the NHTSA require a "remedy" for recalls but nobody seems to have pushed back to determine whether OTA is truly a remedy. The traditional autos all offer dealerships as a backup option, but Tesla and Rivian have several recalls with only OTA remedies already. This seems sketchy.
> I wonder what happens if you disable the e-SIM (in the US) and then a safety recall appears via software update - do dealers have any way to update control modules besides OTA?
I would assume so. Even on older cars, service techs can typically manually push firmware updates over the OBD-II / J2534 port. Rivian's OBD-II port actually hides an Ethernet signal inside of it - so the interface is certainly there.
> Rivian's OBD-II port actually hides an Ethernet signal inside of it - so the interface is certainly there.
Nice. This is really normal now, for what it's worth - all of the European makes have moved this direction as well (DoIP over ENET). There's shockingly little documentation about Rivian online, though, probably because emissions regulation doesn't mandate it.
Nice, thanks for the reply; this is surprisingly undocumented online. Presumably if they got cornered and the module under repair was updatable via this mechanism they'd have some ability to use that system, then. I wonder how charitable they will be about using it for non-recall updates for customers who have solely chosen to opt out.
Rivian are probably the only major manufacturer I've never had a chance to look at in any RE capacity and I'm getting more curious by the second. The reaction their vehicles had to the infamous bricked-infotainment update actually represented a pretty good adherence to safety guidelines (the drivetrain as well as the speedometer and warning lights on the cluster still worked in a degraded format even when the infotainment was bricked) IMO, so they do seem to apply a reasonable degree of care.
Firefox also has a setting like this, although I think it's even nicer in that it makes everything (current and future) AI default to opt-out, but still lets you opt in to specific use cases if you want.
Yes, indeed it does. I didn't feel this way until I worked for a YC-backed startup tho. I mean, YC is the first to admit that not everything needs to be VC funded and some things just aren't good fit for that funding model. I think a code editor is one of them.
Amusingly, my Cupra Born has all its connectivity disabled... because Cupra Australia just didn't want to bring it to this country. Not a bad thing really, aside from the annoying red notification dot telling me I have no signal!
Disabling internet connectivity disables lane keeping assistance. I wonder if this is a dark pattern to punish users who opt out or because they feel they need reports of crashes ahead to do it safely.
I believe the "advanced" LKAS on Rivian only works on highways and relies on an "up to date" geofencing database, so that's the first-order technical reason. And I'm sure they don't exactly prioritize fixing or altering that behavior for the other reason.
I think it's a coarse-grained "this highway has been deemed non-anomalous enough to allow the vision systems to engage," not a fine-grained "we mapped every lane marking."
I assume by lane keeping assistance they mean the more basic camera based system to warn and potentially correct drivers if they drift over a line without indicating. It makes sense it could also be geofenced to limit it to highways.
Lane keeping assistance is optional on any vehicle. I don't believe there is any current production in which you can't opt out of lane keeping assistance?
If you need lane keeping assistance you should just accept you need internet connectivity at all times like wtf cars didn’t always have that just drive straight.
They need to keep lane availability up to date - lanes get closed for repair or realignment sometimes and it’d suck to rear-end an 18 ton grader because you don’t have current DOT info…
Anybody relying on lane-keeping assistance to prevent from slamming into the back of big yellow construction vehicle is doing it wrong, and we should be thankful they didn't hit something else with more victims.
My assumption would be that lane keeping would be about staying in the lines ahead of you, not knowing which lanes are available on the route. Available lanes can change in real-time due to all kinds of reasons.
I think the term has been used for various capabilities over the years.
My friend's 10-year-old Toyota will chirp annoyingly if you drift over a lane line but that's all it does. It doesn't have any ability to steer the car back into the center of the lane. Is that "lane keeping"?
I've seen lanes on highways that abruptly end with zero markings or signs - the concrete barriers just force you into the other lane just as you realize what's going on.
I remember yanking out the onstar unit in my 2015 silverado to physically disconnect the cell antenna. This was (is?) the only practical way to disable cellular in that vehicle.
Kudos to Rivian for making this a supported user privacy feature.
As someone who got into a rollover accident which ended with my car upside down on a freeway, hearing only the onstar person talking to me while half conscious, this is sad.
I do distinctely remember strongly disliking the user agreement I signed for the "internet connected" features of the car when I bought it. 100% rubbed me the wrong way and I couldn't' find a way to opt out, and I wasn't so motivated to physically remove it from my new car. Thankfully.
> As someone who got into a rollover accident which ended with my car upside down on a freeway, hearing only the onstar person talking to me while half conscious, this is sad.
Maybe in theory, but I trust Apple to detect a crash correctly about as far as I can throw my iPhone without breaking its glass back or front.
This is the company whose flagship voice assistant, in 2026, can’t tell the intended recipient in a sentence like “Text Bob Mary signed the deal.” And if my phone happens to be thrown into the back of the car by the crash, I doubt anyone will be able to hear me.
Not to mention that OnStar has operators who talk to first responders. the cell phone thing will just call 911 and hope for the best.
>Nissan earned its second-to-last spot for collecting some of the creepiest categories of data we have ever seen. [Their privacy policy] includes your “sexual activity.” Not to be out done, Kia also mentions they can collect information about your “sex life” in their privacy policy. Oh, and six car companies say they can collect your “genetic information” or “genetic characteristics.”
Ignoring the fact that it's absolutely unhinged and bonkers to include that in the first place, I don't even understand how they could possibly ever get any information about that. Are they using LLMs to generate these policies without review? Or are there really lawyers out there who thought this was pertinent and important to include?
Any car that can record audio in the cabin could have information about your sexual activity. Could also argue it based on location data.
Some laws require discussing very specific lists of categories of information they might have. I'm guessing this is a completionist CYA lawyer accounting for this.
>It sounds to me like this is more akin to the Cellular Data toggle on Android as opposed to Aeroplane mode. If that is the case, it will presumably not prevent your vehicle from connecting to cellular base stations, which means your vehicle will still be trackable by network operators.
>For non-Canadian vehicles, you may reach out to Rivian Service to request that we disable the eSIM card in the vehicle through a service appointment.
Why is that? I really don't want to bring it to the shop to turn off the radio. In Canada it's a toggle in the settings. Is there Canadian legislation mandating this or something?
It was expensive but every day I am happy with my Rivian purchase. Great to have a vehicle where the actual users are obviously thought of (contra for instance the cybertruck where some variety 'cool factor' was obviously prioritized, resulting in finger crunching hoods and such).
This is the sign of a company who listens to their customers. They have received feedback saying some people don't want a connected car, so they make it an option.
If they can make it a toggle for Canadian vehicles, why do you need to schedule an appointment in the US? Obviously it's so they can try to talk you out of it, but c'mon, just give everyone a toggle.
I’m still very happy with my 2024 4Runner, one of the purchases I never regretted a single bit, I did have a Sony head unit installed for a larger screen with support of wireless Apple CarPlay, and that’s enough tech in a car for me. My wife keeps complaining about its lack of auto lane keeping but I’m ok with it bc I enjoy driving it.
Ideally, they would support Android Auto and Apple CarPlay. There are a few big reasons this is preferable.
- I already pay for internet on my phone, I'm not interested in paying for another cellular service just to get maps and music streaming on the screen in my car. GM ditched CarPlay specifically to push customers to their subscription service. I know some electric automakers are offering it "for free", but I do not trust that it will remain free, and that's important when spending tens of thousands of dollars on something you plan to use for a decade+.
- Third party app ecosystem means I can use the maps and music player I want, and not just what my car manufacturer decides is worth including.
- Auto manufacturers suck at software. I've yet to use an infotainment system that wasn't a stark downgrade from CarPlay.
Basically, my car shouldn't need an internet connection because my smartphone already does all the same things but better.
They could store data and then dump it later when the vehicle is being serviced. Unless their privacy states otherwise, assume data is being gathered and sold. Other car manufactures have been caught selling travel data. It's not even that paranoid. Google has been fined in the past for secretly collecting location data in Android when offline and then relaying it back to HQ once the phone got a signal.
> limit or disable certain functionality in the vehicle: ... over-the-air updates, which provide new ... safety enhancements ...
I wonder what happens if you disable the e-SIM (in the US) and then a safety recall appears via software update - do dealers have any way to update control modules besides OTA?
This is a huge unresolved issue with EVs IMO; ICE cars are required to provide emissions-relevant updates over software which can operate using a J2534 passthrough device, which effectively means powertrain modules have to allow (potentially signed) updates over CAN using software that can be obtained by an end user (a lot of people don't know this; for almost any ICE car in the US, you can buy a 3-day or 1-week subscription to the dealership level diagnostic software for a somewhat reasonable fee and use it with a J2534 device).
But for EVs, there's no such rule and as far as I can tell it's entirely a gray area in the US now; the NHTSA require a "remedy" for recalls but nobody seems to have pushed back to determine whether OTA is truly a remedy. The traditional autos all offer dealerships as a backup option, but Tesla and Rivian have several recalls with only OTA remedies already. This seems sketchy.
> I wonder what happens if you disable the e-SIM (in the US) and then a safety recall appears via software update - do dealers have any way to update control modules besides OTA?
I would assume so. Even on older cars, service techs can typically manually push firmware updates over the OBD-II / J2534 port. Rivian's OBD-II port actually hides an Ethernet signal inside of it - so the interface is certainly there.
Fun fact: You can buy an Ethernet adapter directly from Rivian here to connect to the car's internal network: https://rivianservicetools.com/Catalog/Product/TSN00535-300-...
> Rivian's OBD-II port actually hides an Ethernet signal inside of it - so the interface is certainly there.
Nice. This is really normal now, for what it's worth - all of the European makes have moved this direction as well (DoIP over ENET). There's shockingly little documentation about Rivian online, though, probably because emissions regulation doesn't mandate it.
Yeah, I got a cable to update my 2017 BMW's infotainment system, and it's OBD-II to RJ45. Doesn't seem to be too new of a thing.
> do dealers have any way to update control modules besides OTA?
I get some updates OTA, but the dealer has to install some others, and when I took it there they updated it with a USB stick.
Nice, thanks for the reply; this is surprisingly undocumented online. Presumably if they got cornered and the module under repair was updatable via this mechanism they'd have some ability to use that system, then. I wonder how charitable they will be about using it for non-recall updates for customers who have solely chosen to opt out.
Rivian are probably the only major manufacturer I've never had a chance to look at in any RE capacity and I'm getting more curious by the second. The reaction their vehicles had to the infamous bricked-infotainment update actually represented a pretty good adherence to safety guidelines (the drivetrain as well as the speedometer and warning lights on the cluster still worked in a degraded format even when the infotainment was bricked) IMO, so they do seem to apply a reasonable degree of care.
Reminds me of Zed's setting { "disable_ai": true } [1]
Glad it's an option be it for regulatory compliance, security, privacy, or any combination of the three.
[1]: https://zed.dev/blog/disable-ai-features
Firefox also has a setting like this, although I think it's even nicer in that it makes everything (current and future) AI default to opt-out, but still lets you opt in to specific use cases if you want.
Zed is one of the best editors I've ever seen, I always worried the mention of AI would put off people who are missing out on a truly amazing editor.
The thing that really puts people off about Zed is "VC-funded"
Hacker News is not for you then.
There is a healthy dose of VC skepticism here. HN is here for that.
I think they meant that ycombinator is literally a VC shop
So if being VC funded puts you off an editor, being VC funded may also put you off ycombinator.com
Yes, indeed it does. I didn't feel this way until I worked for a YC-backed startup tho. I mean, YC is the first to admit that not everything needs to be VC funded and some things just aren't good fit for that funding model. I think a code editor is one of them.
Amusingly, my Cupra Born has all its connectivity disabled... because Cupra Australia just didn't want to bring it to this country. Not a bad thing really, aside from the annoying red notification dot telling me I have no signal!
Disabling internet connectivity disables lane keeping assistance. I wonder if this is a dark pattern to punish users who opt out or because they feel they need reports of crashes ahead to do it safely.
I believe the "advanced" LKAS on Rivian only works on highways and relies on an "up to date" geofencing database, so that's the first-order technical reason. And I'm sure they don't exactly prioritize fixing or altering that behavior for the other reason.
how would that even work? even if you could generate accurate maps of lane markings, non-differential gps in not accurate enough
I think it's a coarse-grained "this highway has been deemed non-anomalous enough to allow the vision systems to engage," not a fine-grained "we mapped every lane marking."
I understand how it could disable some features. Hyundai has a GPS-assisted database of highways that are approved for enhanced driver assist (HDA2).
I assume by lane keeping assistance they mean the more basic camera based system to warn and potentially correct drivers if they drift over a line without indicating. It makes sense it could also be geofenced to limit it to highways.
Lane keeping assistance is optional on any vehicle. I don't believe there is any current production in which you can't opt out of lane keeping assistance?
Isn't it mandatory in thr EU if the car supports it? Mandatory as in it's opt-out and will re-enable itself every time you turn on the car.
If you need lane keeping assistance you should just accept you need internet connectivity at all times like wtf cars didn’t always have that just drive straight.
They need to keep lane availability up to date - lanes get closed for repair or realignment sometimes and it’d suck to rear-end an 18 ton grader because you don’t have current DOT info…
Anybody relying on lane-keeping assistance to prevent from slamming into the back of big yellow construction vehicle is doing it wrong, and we should be thankful they didn't hit something else with more victims.
My assumption would be that lane keeping would be about staying in the lines ahead of you, not knowing which lanes are available on the route. Available lanes can change in real-time due to all kinds of reasons.
I think the term has been used for various capabilities over the years.
My friend's 10-year-old Toyota will chirp annoyingly if you drift over a lane line but that's all it does. It doesn't have any ability to steer the car back into the center of the lane. Is that "lane keeping"?
No, that's "lane departure warning"
I didn't know that. I assumed it was sensor-based. How up-to-date can that really be? That sounds pretty crazy.
It does say lane "keeping" not lane "changing". I assume it's the safety feature to remain in the lane.
I've seen lanes on highways that abruptly end with zero markings or signs - the concrete barriers just force you into the other lane just as you realize what's going on.
I remember yanking out the onstar unit in my 2015 silverado to physically disconnect the cell antenna. This was (is?) the only practical way to disable cellular in that vehicle.
Kudos to Rivian for making this a supported user privacy feature.
As someone who got into a rollover accident which ended with my car upside down on a freeway, hearing only the onstar person talking to me while half conscious, this is sad.
I do distinctely remember strongly disliking the user agreement I signed for the "internet connected" features of the car when I bought it. 100% rubbed me the wrong way and I couldn't' find a way to opt out, and I wasn't so motivated to physically remove it from my new car. Thankfully.
Shouldn't have to trade privacy for safety.
> As someone who got into a rollover accident which ended with my car upside down on a freeway, hearing only the onstar person talking to me while half conscious, this is sad.
My phone does this now. Most phones do it now.
Maybe in theory, but I trust Apple to detect a crash correctly about as far as I can throw my iPhone without breaking its glass back or front.
This is the company whose flagship voice assistant, in 2026, can’t tell the intended recipient in a sentence like “Text Bob Mary signed the deal.” And if my phone happens to be thrown into the back of the car by the crash, I doubt anyone will be able to hear me.
Not to mention that OnStar has operators who talk to first responders. the cell phone thing will just call 911 and hope for the best.
I pay for OnStar, and think it’s worth it.
sorry, I didn't find someone named "bob mary" in your contacts list
Stress test your mounts!
>Shouldn't have to trade privacy for safety.
You shouldn't have to, and yet...
https://www.ftc.gov/news-events/news/press-releases/2026/01/...
Related: Mozilla did a review of different cars for privacy:
(https://www.mozillafoundation.org/en/privacynotincluded/arti...)
>Nissan earned its second-to-last spot for collecting some of the creepiest categories of data we have ever seen. [Their privacy policy] includes your “sexual activity.” Not to be out done, Kia also mentions they can collect information about your “sex life” in their privacy policy. Oh, and six car companies say they can collect your “genetic information” or “genetic characteristics.”
Ignoring the fact that it's absolutely unhinged and bonkers to include that in the first place, I don't even understand how they could possibly ever get any information about that. Are they using LLMs to generate these policies without review? Or are there really lawyers out there who thought this was pertinent and important to include?
Legal wiggle room in case the sleepy eyes cam catches some action? Disclaimer: no idea how the tired driver sensors work.
Any car that can record audio in the cabin could have information about your sexual activity. Could also argue it based on location data.
Some laws require discussing very specific lists of categories of information they might have. I'm guessing this is a completionist CYA lawyer accounting for this.
> limit or disable certain functionality in the vehicle (e.g., navigation, lane keeping assistance (…)
Curious why lane keeping assistance would need to communicate externally. Isn’t all this processed in the vehicle?
Show me where I can rip out the antennae/modem, otherwise you’re all talk.
>It sounds to me like this is more akin to the Cellular Data toggle on Android as opposed to Aeroplane mode. If that is the case, it will presumably not prevent your vehicle from connecting to cellular base stations, which means your vehicle will still be trackable by network operators.
(https://discuss.privacyguides.net/t/rivian-allows-you-to-dis...)
>For non-Canadian vehicles, you may reach out to Rivian Service to request that we disable the eSIM card in the vehicle through a service appointment.
Why is that? I really don't want to bring it to the shop to turn off the radio. In Canada it's a toggle in the settings. Is there Canadian legislation mandating this or something?
Yes, no credit if I have to ask someone to turn it off for me. It could obviously be a toggle here in the US.
It was expensive but every day I am happy with my Rivian purchase. Great to have a vehicle where the actual users are obviously thought of (contra for instance the cybertruck where some variety 'cool factor' was obviously prioritized, resulting in finger crunching hoods and such).
Copium
At least come up with your own thought instead of repeating someone else's thinking
Na it's great stay broke
Edit: and mad
This is the sign of a company who listens to their customers. They have received feedback saying some people don't want a connected car, so they make it an option.
Or trying to get ahead of competition such as slate.
I just want to bring my own electronics.
If you mean the self-driving part specifically, apparently Comma AI already does this: https://comma.ai/
If they can make it a toggle for Canadian vehicles, why do you need to schedule an appointment in the US? Obviously it's so they can try to talk you out of it, but c'mon, just give everyone a toggle.
I wish Tesla did this.
I’m still very happy with my 2024 4Runner, one of the purchases I never regretted a single bit, I did have a Sony head unit installed for a larger screen with support of wireless Apple CarPlay, and that’s enough tech in a car for me. My wife keeps complaining about its lack of auto lane keeping but I’m ok with it bc I enjoy driving it.
How about also adding Android Auto as well? Oh no, it'd take away their "control the user experience" power-tripping.
So why would you prefer goggle's "control the user experience" power-tripping, to rivian's?
I'd much rather side with the company that was willing to allow the user to disable net connectivity...
I would prefer to have the choice.
Ideally, they would support Android Auto and Apple CarPlay. There are a few big reasons this is preferable.
- I already pay for internet on my phone, I'm not interested in paying for another cellular service just to get maps and music streaming on the screen in my car. GM ditched CarPlay specifically to push customers to their subscription service. I know some electric automakers are offering it "for free", but I do not trust that it will remain free, and that's important when spending tens of thousands of dollars on something you plan to use for a decade+.
- Third party app ecosystem means I can use the maps and music player I want, and not just what my car manufacturer decides is worth including.
- Auto manufacturers suck at software. I've yet to use an infotainment system that wasn't a stark downgrade from CarPlay.
Basically, my car shouldn't need an internet connection because my smartphone already does all the same things but better.
My phone runs GrapheneOS and does not use any Google service. But it supports Android Auto. Allowing it would dramatically improve the experience.
Instead, Rivian adds a purely performative toggle that makes the car's navigation largely useless and doesn't provide a good alternative.
Your phone has an airplane mode.
Also, I can replace or upgrade my phone a hell of a lot more easily than I can replace my car.
This is insufficient. There needs to be a physical button that either physically disconnects every antenna and/or de-powers the transceiver.
They could store data and then dump it later when the vehicle is being serviced. Unless their privacy states otherwise, assume data is being gathered and sold. Other car manufactures have been caught selling travel data. It's not even that paranoid. Google has been fined in the past for secretly collecting location data in Android when offline and then relaying it back to HQ once the phone got a signal.
Kinda rich coming from someone who doesn't even have a valid SSL cert on the website in their profile bio...
What does that have to do with anything?
He expects an obsurd level of effort from other people to protect privacy when he isn't doing the bare minimum for what he actually does himself.
didn't you get the memo? If you don't set up proper SSL certificates you can't give opinions on the features you want in a car...